Why use only splunk? Why can’t I go for something that is open source?
Define monitoring in splunk?
Can you write down a general regular expression for extracting ip address from logs?
What commands are included in the filtering results category?
How To specify minimum disk usage in splunk?
What is sos?
Which command is used to the “filtering results” category- explain?
Why should we use splunk alert?
What are most important configuration files of splunk or can you tell name of few important configuration files in splunk?
What is the Splunk latest version?
How many roles are there in splunk?
Why should we use splunk alert? What are the different options while setting up alerts?
Explain splunk components?
Explain the function of alert manager?
How do we convert unix time into string and string back to unix time format?
